npm advisory reports, with evidence.

OpenSSF/OSV malware advisory MAL-2026-14543 blocks this version. Package advertised as a self-signed TLS certificate generator ships a fake RSA private key at test/key.pem whose body, onc...

OpenSSF/OSV malware advisory MAL-2026-14543 blocks this version. Package advertised as a self-signed TLS certificate generator ships a fake RSA private key at test/key.pem whose body, onc...

OpenSSF/OSV malware advisory MAL-2026-14543 blocks this version. Package advertised as a self-signed TLS certificate generator ships a fake RSA private key at test/key.pem whose body, onc...

OpenSSF/OSV malware advisory MAL-2026-14543 blocks this version. Package advertised as a self-signed TLS certificate generator ships a fake RSA private key at test/key.pem whose body, onc...

OpenSSF/OSV malware advisory MAL-2026-14543 blocks this version. Package advertised as a self-signed TLS certificate generator ships a fake RSA private key at test/key.pem whose body, onc...

OpenSSF/OSV malware advisory MAL-2026-14543 blocks this version. Package advertised as a self-signed TLS certificate generator ships a fake RSA private key at test/key.pem whose body, onc...

OpenSSF/OSV malware advisory MAL-2026-14543 blocks this version. Package advertised as a self-signed TLS certificate generator ships a fake RSA private key at test/key.pem whose body, onc...

OpenSSF/OSV malware advisory MAL-2026-14550 blocks this version. tset_racie@1.0.3 ships a single 45KB obfuscator.io-style payload as its main entry (index.js). The file consists of a 551-...

OpenSSF/OSV malware advisory MAL-2026-14550 blocks this version. tset_racie@1.0.3 ships a single 45KB obfuscator.io-style payload as its main entry (index.js). The file consists of a 551-...

OpenSSF/OSV malware advisory MAL-2026-14544 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys store...

OpenSSF/OSV malware advisory MAL-2026-14544 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys store...

OpenSSF/OSV malware advisory MAL-2026-14544 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys store...

OpenSSF/OSV malware advisory MAL-2026-14544 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys store...

OpenSSF/OSV malware advisory MAL-2026-14544 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys store...

OpenSSF/OSV malware advisory MAL-2026-14544 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys store...

OpenSSF/OSV malware advisory MAL-2026-14544 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys store...

OpenSSF/OSV malware advisory MAL-2026-14544 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys store...

OpenSSF/OSV malware advisory MAL-2026-14544 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys store...

OpenSSF/OSV malware advisory MAL-2026-14537 blocks this version. The package declares a preinstall lifecycle script (`node index.js`) that runs automatically on `npm install`. index.js co...

OpenSSF/OSV malware advisory MAL-2026-14536 blocks this version. package.json declares a preinstall hook that runs `node index.js` on every `npm install`. index.js collects installer host...

OpenSSF/OSV malware advisory MAL-2026-14539 blocks this version. The npm package ships an obfuscated payload appended to templates/backend/.eslintrc.js, after a legitimate-looking ESLint...